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AUTONOMIC ROLLBACK 

BACKGROUND OF THE INVENTION 

Statement of the Technical Field 

The present invention relates to the field of software installation and more 
particularly to software un-installation. 
Description of the Related Art 

The installation of software has long proven to be challenging even to the most 
sophisticated of end users. Prior to the advent of the multiprocessing and multitasking 
operating system, software installation in the personal computing context often merely 
required the transfer of program files from portable media such as a floppy diskette to 
fixed storage. On occasion, where the program to be installed exceeded in size that 
which could be hosted in a single floppy diskette, the installation process could span the 
multiple diskettes ultimately resulting in the assembly of all required program files in a 
strategic location on disk. 

When graphical windowing operating systems stormed the marketplace in the 
early 1990s, no longer did the copying of program files suffice in the installation of a 
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computer program. Rather, complex configuration of the application, the windowing 
operating system, or both could be required depending upon the level of integration 
required for the effective, trouble-free operation of the application in within the graphical 
environment. Initially, the complex configuration could be specified in a separate text 
file such as an initialization file. Subsequently, as the windowing environment itself 
transformed into an ultra-complex system, registry entries would become the de facto 
medium for persisting configuration elements of an application, in both cases, however, 
sophisticated installation programs became the norm in deploying new software 
applications. 

Significantly, given the complexity of the modern software installation process, a 
great many number of opportunities exist for the installation to fail. Accounting for this 
possibility, many conventional software installation applications permit a counter- 
installation process known in the art as an un-installation process. In the prototypical 
un-installation process, all files transferred to fixed storage can be removed, e.g. 
deleted, and all entries applied to the registry can be purged from the registry. The un- 
installation process can become complicated, however, where registry entries are not 
added, but changed, and where all files added may already support the operation of 
other installed applications. Of course, it is to be recognized by the skilled artisan that 
registry entries in of themselves are limited to files and application settings and do not 
relate the deployment of application objects or components. Moreover, registry entries 
mostly relate to a single computing platform and cannot be scaled to the enterprise. 

In any case, oftentimes shared files cannot be removed during an un-installation 
process lest their removal affect the operation of other already installed applications. 
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Similarly, those registry entries which have been modified merely cannot be removed 
lest their removal similariy affect the operation of an application dependant upon the 
existence the registry entry. Rather, to place the system in a state which existed prior to 
the installation of the application, the registry entries must be "rolled-back" and only 
those files which had been added to the system and which are not relied upon by other 
applications in the system must be removed. 

Presently, rollback technologies exist typically as part of installation processes 
and as part of the underlying operating system. For instance, in one popular office 
productivity suite, every file and registry removed by the installation process can be 
saved to a hidden folder. When the installation process has completed successfully, the 
hidden folder and all of its contents can be deleted. When the installation process is 
cancelled or iaWs before the process can complete, the installation process can refer the 
hidden folder to rollback the registry to its former state and to replace any files which 
had been removed up to the point of failure. 

Despite the advancement of installation technologies, rollback methodologies 
alone do not completely address the matter of a failed software installation. Specifically, 
though an application can be completely installed without incident, the subsequent 
operation of the installed application either can fail to effectively coexist with other 
installed applications, or can fail in its own operation. In either case, it would be 
preferable to completely remove the newly installed application as if the installed 
application had never been. Unfortunately, conventional rollback technologies cannot 
accommodate the foregoing circumstance because rollback technologies remain 
effectively only during the course of the installation process. 
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Personal computing systems recently have been distributed with blanket rollback 
technologies in which the entire image of the system can be replaced with a previous 
image which existed before the occurrence of a failed installation. Nevertheless, the 
blanket rollback approach can be described as heavy handed in as much as it is not 
desirable to rollback the state of the system so that desirable state changes in the 
system are rolled back along with the effect of the failed installation. Moreover, the 
blanket rollback technology requires a manual detemiination that an installation has 
failed. 

Yet, In the computing environment of the twenty-first century, determining that an 
installation failure has occurred often is a matter of subjective determination which is not 
easily resolved through the manual intervention of a human being. Accordingly, it would 
be desirable to implement the effect of rollback technologies in a manner so as to permit 
the rolling back of a failed installation when it can be detemiined that an application 
installation has failed though the installation process itself may have completed 
successfully. Moreover, it would be desirable to extend the effect of rollback 
technologies to the deployment of application objects and components, both within a 
single computing platform and in a scaled manner in the computing enterprise. 
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SUMMARY OF THE INVENTION 

The present Invention addresses the deficiencies of the art in respect to software 
un-installatlon and provides a novel and non-obvious method, system and apparatus for 
autonomically rolling back the state of a system when an installation process has 
completed successfully, but where the operation of the system as modified is 
considered a failure. In a preferred aspect of the present invention, an autonomic 
rollback system can include a registry configured to store meta-data specifying a 
contemporary state of a system of components. The system also can include a backup 
location configured to store a backup copy of the meta-data in the registry specifying a 
past state of the system of components prior to installing a new component. 

A monitor can be programmed to compare the operation of the system of 
components with a policy defining a nominal state of operation for the system of 
components. Finally, a rollback processor can be coupled to the registry and the 
backup location. Responsive to the monitor, the rollback processor can restore the 
registry to the past state when the monitor detemnines that the operation of the system 
of components falls outside the nominal state defined within the policy. Importantly, the 
system of components can reside within an application server. 

A method for autonomically rolling back a system of components in response to 
detecting a failure condition in the system can include, prior to installing a new 
component in the system, recording a backup copy of a registry storing contemporary 
system state information. The new component can be installed in the system and a 
new state of the system can be recorded in the registry. The operation of the system 
can be monitored and the operation of the system can be compared to a policy defining 
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a nominal state of operation for tlie system. Wlien tlie operation of the system exceeds 
the defined nominal state of operation in the policy, the installed new component can be 
removed and the registry can be restored with the backup copy in order to rollback the 
new state to a state which had existed prior to the installation of the new component. 

Notably, the step of recording a backup copy of a registry can include recording a 
listing of all installed components in the system, defining dependencies between the 
installed components, specifying resources within the system which are required by at 
least one of the installed components, and identifying environmental parameter values 
established to support the installed components. Similarly, the step of recording a new 
state in the registry can include recording a listing of all installed components in the 
system including the new component, defining dependencies between the installed 
components, specifying resources within the system which are required by at least one 
of the installed components, and identifying environmental parameter values 
established to support the installed components. 

In response to the detection of a failure condition, resources which are no longer 
required by any of the installed components as can be inferred from the restored 
registry can be released. Moreover, the environmental parameters can be reset to 
values specified within the restored registry. Finally, a network administrator can be 
notified when the operation of the system exceeds the defined nominal state of 
operation in the policy so that the network administrator can manually detennine when a 
rollback process is appropriate. 

Importantly, central to inventive arrangements, an e-Registry can be d... 
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Additional aspects of the invention will be set forth in part in the description which 
follows, and in part will be obvious from the description, or may be learned by practice 
of the invention. The aspects of the invention will be realized and attained by means of 
the elements and combinations particularly pointed out in the appended claims. It is to 
be understood that both the foregoing general description and the following detailed 
description are exemplary and explanatory only and are not restrictive of the invention, 
as claimed. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
The accompanying drawings, which are incorporated in and constitute part of the 
this specification, illustrate embodiments of the Invention and together with the 
description, serve to explain the principles of the invention. The embodiments 
illustrated herein are presently preferred. It being understood, however, that the 
invention is not limited to the precise arrangements and instrumentalities shown, 
wherein: 

Figure 1 is schematic Illustration of an autonomic rollback system which has 
been configured In accordance with a preferred aspect of the inventive arrangements; 
and, 

Figure 2 is a flow chart illustrating a process for detecting and rolling back a 
system following the failed installation of a component In the system of Figure 1 . 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 



The present invention is an autonomic rollback system. In accordance with the 
present invention, a registry can store therein meta-data regarding the state of a system 
which can change as new applications are installed. When an application is installed, 
the meta-data within the registry can be copied to a backup location as can any 
externally referenced data. Subsequently, even though the installation process of a 
particular application may have completed successfully, the operation of the installed 
application, or the operation of other installed applications, may fail requiring the un- 
installation of the application and the rolling back of the state of the system 

In this regard, a policy can be established which can specify operational 
boundaries within which the operation of the system can be considered nominal, and 
beyond which the system can be determined to have failed. Importantly, the installation 
of an application can be detemriined to have failed despite the successful completion of 
a corresponding installation routine. In any case, the operation of the system can be 
monitored and compared to the policy to identify a failure condition. 

Where the bounds of the policy have been exceeded by the operation of the 
system, a systems administrator can be notified. Moreover, preferably the most 
recently installed application can be un-installed and the state of the system can be 
rolled back to a state which had existed prior to the installation of the application. In this 
regard, the registry copy and the external data in the backup location can be consulted 
to restore the system to the prior state. Additionally, the meta-data in the registry copy 
in the backup location can replace the most recent meta-data in the registry. 
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Importantly, the autonomic rollback system of the present can be applied to the 
context of installing new components in a component-based system hosted within an 
application server. In further illustration, Figure 1 is schematic illustration of an 
autonomic rollbacl( system configured accordingly. As shown in Figure 1 , the 
autonomic rollback system can include one or more client computing devices 110 
coupled to an application server 130 over a computer communications network 120. 
The application server 130 can host a number of components 140 operating in concert 
with one another to fonn an application. 

An e-Reglstry 150 can be further coupled to the application server 130. The e- 
Registry 150 can store therein meta-data 160 regarding the state of the application as 
defined by the installed components 140. Specifically, the meta-data 160 can include 
both a contemporary snapshot of the state of the system of components 140, as well as 
a backup copy of a snapshot of the state of the system of components 140 at a time 
prior to the installation of the most recent one of the components 140. Moreover, the 
backup copy can include external data referenced within the meta-data 160. 

A roll back and recorder process 170 also can be coupled to the application 
server 130. The roll back and recorder process 170 both can maintain the meta data 
160 in the e-Registry 150, and also can manage the rolling back of the state of the 
system of components 140 when deemed appropriate by the monitor 180. In this 
regard, the monitor 180 can be coupled both to the application server 130 and a policy 
190 and can monitor the operation of the system of components 140. The policy 190, 
by comparison, can specify operational boundaries within which the operation of the 
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system of components 140 can be considered nominal, and beyond which the operation 
of the system of components 140 can be considered anomalous. 

When a new one of the components 140 is installed, the roll back and recorder 
process 170 can create a copy of the meta data 160 in the e-Registry 150 to reflect the 
state of the system of components 140 at the time of the installation. Additionally, 
.external data referenced by elements of the meta data 160 further can be stored with 
the copy. Subsequently, the new one of the components 140 can be installed and the 
configuration of the system of components 140 can be written to the e-Registry 150. 
Once the installation process has completed, the system can be loaded for execution 
and the monitor 180 can begin the process of monitoring the operation of the system of 
components 140. 

When the monitor 180 detemilnes that the operation of the system of 
components 140 exceeds the boundaries set forth in the policy 190, a failure condition 
can be declared and a suitable role can be notified, for instance the network 
administrator. Additionally, in a preferred aspect of the present invention, the roll back 
and recorder process 170 can retrieve an archive copy of the meta data 160 in the e- 
Registry 150 in order to restore the state of the system of components 140 as it had 
been prior to the installation of the most recent one of the components 140. In this way, 
the state of the system can be rolled back to its prior state, even though the installation 
process of the newly installed one of the components 140 may have completed 
successfully some time beforehand. 

In more particular illustration, Figure 2 is a flow chart illustrating a process for 
detecting and rolling back a system following the failed installation of a component in 
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the system of Figure 1. Beginning in block 205, when a request to install a new 
component is received, the e-Registry can be loaded as can any external data 
reference by the e-Registry in block 210. In block 215, the contents of the e-Registry 
and the external data can be backed up to another location, for instance a backup 
location within the e-Registry. In block 220, the component can be installed to the 
system using conventional installation means. 

In block 225, once the installation process has completed, the system can be 
reloaded for operation. Additionally, in block 230 a policy can be loaded for detennining 
when the operation of the system has failed. In block 235, the operation of the system 
can be monitored and in block 240, measurable aspects of the operation can be 
compared to parameters specified within the policy. In decision block 245, it can be 
detemiined whether the operation of the system has caused an out-of-bounds condition. 
If not, the monitor can continue to monitor the operation of the system through blocks 
235, 240 and 245. 

In the event that the monitor detects an out-of-bounds condition in decision block 
245, however, in block 255 a suitable role can be notified of the out-of-bounds condition. 
In this regard, a notification can be sent to the role specifying the particular parameters 
which had been exceeded in the policy. Based upon the notification, the role can direct 
the un-installation of the component and the rolling back of the system to a state 
reflected in the backup copy of the e-Registry. Preferably, the foregoing process can be 
managed autonomically in block 250 by directing the rolling back of the system without 
first requiring human intervention. 
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The present invention can be realized in hardware, software, or a combination of 
hardware and software. An Implementation of the method and system of the present 
Invention can be realized in a centralized fashion in one computer system, or in a 
distributed fashion where different elements are spread across several interconnected 
computer systems. Any kind of computer system, or other apparatus adapted for 
carrying out the methods described herein, is suited to perform the functions described 
herein. 

A typical combination of hardware and software could be a general purpose 
computer system with a computer program that, when being loaded and executed, 
controls the computer system such that it canries out the methods described herein. 
The present invention can also be embedded in a computer program product, which 
comprises all the features enabling the implementation of the methods described 
herein, and which, when loaded in a computer system is able to carry out these 
methods. 

Computer program or application in the present context means any expression. 
In any language, code or notation, of a set of Instructions intended to cause a system 
having an information processing capability to perform a particular function either 
directly or after either or both of the following a) conversion to another language, code 
or notation; b) reproduction in a different material fonn. Significantly, this invention can 
be embodied In other specific forms without departing from the spirit or essential 
attributes thereof, and accordingly, reference should be had to the following claims, 
rather than to the foregoing specification, as indicating the scope of the invention. 
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